diff options
| author | jim-p <jimp@pfsense.org> | 2015-06-16 10:57:55 -0400 |
|---|---|---|
| committer | jim-p <jimp@pfsense.org> | 2015-06-16 10:57:55 -0400 |
| commit | 2debaf5c34065aee52e4c095f4b120c5da518d3e (patch) | |
| tree | 28a79c5c674333a624367e207abbfc91562549e1 /usr/local/www/vpn_openvpn_csc.php | |
| parent | 3aef3ad0c052443b1801ec216e1e6f87a6d984a8 (diff) | |
| download | pfsense-2debaf5c34065aee52e4c095f4b120c5da518d3e.zip pfsense-2debaf5c34065aee52e4c095f4b120c5da518d3e.tar.gz | |
Fix some low-hanging potential security issues.
Diffstat (limited to 'usr/local/www/vpn_openvpn_csc.php')
| -rw-r--r-- | usr/local/www/vpn_openvpn_csc.php | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/usr/local/www/vpn_openvpn_csc.php b/usr/local/www/vpn_openvpn_csc.php index 69dfd28..356db7f 100644 --- a/usr/local/www/vpn_openvpn_csc.php +++ b/usr/local/www/vpn_openvpn_csc.php @@ -640,7 +640,7 @@ function netbios_change() { <span class="vexpl"> <?=gettext("Server"); ?> #1: </span> - <input name="ntp_server1" type="text" class="formfld unknown" id="ntp_server1" size="20" value="<?=$pconfig['ntp_server1'];?>" /> + <input name="ntp_server1" type="text" class="formfld unknown" id="ntp_server1" size="20" value="<?=htmlspecialchars($pconfig['ntp_server1']);?>" /> </td> </tr> <tr> @@ -648,7 +648,7 @@ function netbios_change() { <span class="vexpl"> <?=gettext("Server"); ?> #2: </span> - <input name="ntp_server2" type="text" class="formfld unknown" id="ntp_server2" size="20" value="<?=$pconfig['ntp_server2'];?>" /> + <input name="ntp_server2" type="text" class="formfld unknown" id="ntp_server2" size="20" value="<?=htmlspecialchars($pconfig['ntp_server2']);?>" /> </td> </tr> </table> @@ -737,7 +737,7 @@ function netbios_change() { <span class="vexpl"> <?=gettext("Server"); ?> #1: </span> - <input name="wins_server1" type="text" class="formfld unknown" id="wins_server1" size="20" value="<?=$pconfig['wins_server1'];?>" /> + <input name="wins_server1" type="text" class="formfld unknown" id="wins_server1" size="20" value="<?=htmlspecialchars($pconfig['wins_server1']);?>" /> </td> </tr> <tr> @@ -745,7 +745,7 @@ function netbios_change() { <span class="vexpl"> <?=gettext("Server"); ?> #2: </span> - <input name="wins_server2" type="text" class="formfld unknown" id="wins_server2" size="20" value="<?=$pconfig['wins_server2'];?>" /> + <input name="wins_server2" type="text" class="formfld unknown" id="wins_server2" size="20" value="<?=htmlspecialchars($pconfig['wins_server2']);?>" /> </td> </tr> </table> |
